Who are we?
Suggested text: Our site address is: https://codeflow-wp.com.
Comments
Suggested text: When you leave a comment on our site, the data entered in the comment form, as well as your IP address and the user agent of your browser are collected to help us detect unwanted comments.
An anonymized string created from your email address (also called a hash) may be sent to the Gravatar service to check whether you are using it. The privacy policy for the Gravatar service is available here: https://automattic.com/privacy/. After validation of your comment, your profile photo will be publicly visible next to your comment.
Media
Suggested text: If you upload images to the Site, we advise you to avoid uploading images that contain EXIF GPS coordinate data. People visiting your site can download and extract location data from these images.
Cookies
Suggested text: If you leave a comment on our site, you will be asked to save your name, email address and website in cookies. This is only for your convenience so that you do not have to fill in this information if you leave another comment later. These cookies expire after one year.
If you go to the login page, a temporary cookie will be created to determine whether your browser accepts cookies. It does not contain personal data and will be deleted automatically when you close your browser.
When you log in, we will set up a number of cookies to save your login information and screen preferences. The lifespan of a connection cookie is two days, that of a screen option cookie is one year. If you check "Remember me", your login cookie will be retained for two weeks. If you log out of your account, the login cookie will be deleted.
By editing or publishing a post, an additional cookie will be stored in your browser. This cookie does not include any personal data. It simply shows the ID of the post you just edited. It expires after one day.
Content embedded from other sites
Suggested text: Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Content embedded from other sites behaves the same as if the visitor went to that other site.
These websites could collect data about you, use cookies, embed third-party tracking tools, track your interactions with this embedded content if you have an account connected to their website.
Use and transmission of your personal data
Suggested text: If you request a password reset, your IP address will be included in the reset email.
Storage times for your data
Suggested text: If you leave a comment, the comment and its metadata are retained indefinitely. This allows subsequent comments to be automatically recognized and approved instead of leaving them in the moderation queue.
For accounts that register on our site (if applicable), we also store the personal data indicated in their profile. All accounts can view, edit, or delete their personal information at any time (except their ID). Site managers can also view and modify this information.
The rights you have over your data
Suggested text: If you have an account or have left comments on the site, you can request to receive a file containing all the personal data we have about you, including that you have provided to us. You can also request the deletion of personal data concerning you. This does not take into account data stored for administrative, legal or security purposes.
Where your data is sent
Suggested text: Visitor comments may be checked using an automated spam comment detection service.
Deletion of your data
In accordance with the General Data Protection Regulation (GDPR – Article 17), You are fundamentally right — GDPR (right to erasure Article 17) only applies to EU residents.
But for Facebook, it's not a legal requirement that they check — it's just a technical requirement of their app review. They want to see a URL that explains how to delete data, period.
So the text I provided is perfect as is — you can also word it like this:
Right to deletion of your data (EU residents)
In accordance with the GDPR (Article 17), residents of the European Union may request the deletion of their personal data by sending an email to: asso.ceps@gmail.com
This covers the EU legal obligation AND the Facebook box. Shall we continue with the icon and the category?
To exercise this right, send your request by email via our
Your request will be processed within a maximum of 30 days. You will need to specify your first and last name and email address associated with your account.
The deleted data includes: your customer account, your personal information, your order history and any data related to your use of the site.
Certain data may be retained if required by law (accounting and tax obligations).